Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa
File:                     FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (raw, json)
Hash identifier:          DhlpMOxeerbam0Ebreh2cRbDaMP2SQsnadCF8Us5sL4=
Subject key identifier:   68:D4:DF:EF:3A:B6:EB:C8:0F:97:70:E3:57:07:7B:15:5F:13:E1:82
Certificate issuer:       /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial:       0721
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa
Signing time:             Fri 24 Jul 2026 23:43:31 +0000
ROA not before:           Fri 24 Jul 2026 23:43:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154321
IP address blocks:        103.117.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
                          rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
        Validity
            Not Before: Jul 24 23:43:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a63f8a3-5e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:aa:80:7b:b1:2e:46:4a:b5:10:e9:45:54:
                    68:f9:9d:9b:31:b2:df:7d:55:84:da:05:7a:ef:47:
                    a8:24:ee:c3:36:6e:65:5d:33:b1:8a:12:0d:71:eb:
                    cb:07:0c:7e:f5:bd:3c:fd:80:37:9d:47:0a:19:82:
                    f0:5d:65:e9:1a:a8:d0:1d:63:a2:6e:4e:6c:98:05:
                    8c:5f:ae:b6:a6:d3:20:1b:b6:78:e2:00:c0:1c:97:
                    c5:1f:ca:14:0d:16:d6:ee:30:8b:95:a1:73:44:08:
                    33:45:11:9e:43:93:67:86:97:0a:e7:bf:44:60:88:
                    b0:09:91:46:3c:fe:11:3f:47:13:42:30:8b:80:59:
                    03:80:06:d3:63:81:f4:e4:f1:9a:8b:78:f4:dc:0d:
                    f5:47:bb:9f:9d:11:16:3c:5a:96:74:18:31:7a:ad:
                    05:ce:2f:8e:8e:8b:3f:f2:a1:d0:77:c4:82:b4:67:
                    9c:a2:70:35:b4:b6:7a:07:fb:90:e0:31:b8:99:0c:
                    ad:27:3e:00:ae:bd:43:97:b3:20:20:e4:c0:91:93:
                    10:11:9c:08:98:e4:e6:64:94:c7:31:20:f7:64:a1:
                    d4:13:52:23:5b:b0:c8:64:df:2b:36:d5:66:11:42:
                    01:2f:74:29:e2:69:21:a3:4c:08:ce:70:f9:48:52:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:DF:EF:3A:B6:EB:C8:0F:97:70:E3:57:07:7B:15:5F:13:E1:82
            X509v3 Authority Key Identifier:
                keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/FFC2CBFCF2DA11F09E4464B23F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:74:4b:36:38:ba:17:ab:3d:e6:99:18:f1:a8:f9:77:6f:44:
         55:e3:ed:a3:a9:c7:f7:a6:04:81:c9:fa:f2:1c:a9:e6:c7:b0:
         4e:9b:70:fa:82:84:e9:39:74:86:78:69:82:b5:6a:ed:49:e0:
         6d:5b:bf:ae:0f:3a:e2:8f:b0:71:3b:a0:1c:2f:4a:d5:a7:cf:
         62:f1:88:d5:76:fb:78:c2:d2:63:7a:cb:d9:38:05:be:2b:d4:
         f3:e0:65:06:aa:19:72:97:52:5d:5b:bb:63:6b:f9:8f:60:42:
         07:3d:29:cd:df:82:4c:81:a3:64:e8:0c:5e:5b:b0:7a:cc:0a:
         f8:05:b1:b7:8d:35:88:f9:1f:c7:99:64:d2:75:bd:84:4e:79:
         d5:00:31:39:8d:4c:20:59:51:d5:00:5b:21:a3:68:80:ef:b4:
         21:a2:cb:95:b3:0d:b9:65:73:0a:e9:67:c1:0b:9b:40:58:dd:
         d9:23:48:9a:d3:1a:55:4c:8c:52:43:f2:c4:08:5d:46:26:41:
         ba:bf:94:92:3e:91:9f:23:e8:98:29:33:a0:f8:3a:c9:f0:2f:
         9d:b0:57:25:d4:28:67:88:be:ce:57:de:83:21:0f:5c:c5:61:
         c3:22:8c:9f:d0:82:fb:d7:ef:89:bf:45:77:a8:e9:57:bf:90:
         0a:05:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:21 2026 by rpki-client